Search NASA⌕ Search

SEARCH · Search NASA

Results for “secure keys”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7

Constant Overhead Entanglement Distillation via Scrambling

High-fidelity quantum entanglement enables key quantum networking capabilities such as secure communication and distributed quantum computing, but long-distance entanglement distribution is limited by noise and loss. Entanglement distillation protocols address this problem by extracting high-fidelity Bell pairs from multiple noisy ones. The primary objective is minimizing the resource overhead: the number of noisy input pairs needed to distill each high-fidelity output pair. While protocols achieving optimal overhead are known in theory, they often require complex decoding operations that make practical implementation challenging. We circumvent this challenge by introducing protocols that use quantum scrambling—the spreading of quantum information under chaotic dynamics—through random Clifford operations. Based on this scrambling mechanism, our protocol maintains asymptotically constant overhead, independent of the desired output error rate $\bar{𝜖}$ , and can be implemented with shallow quantum circuits of depth 𝑂⁡(poly log log⁡ $\bar{𝜖}$ −1 ) and memory 𝑂⁡(poly log⁡ $\bar{𝜖}$ −1 ). Our protocol remains effective even with noisy quantum gates. By incorporating error correction, our protocol achieves state-of-the-art performance: starting with pairs of 10% initial infidelity, we require only seven noisy inputs per output pair to distill a single Bell pair with infidelity $\bar{𝜖}$ =10 −12 , substantially outperforming existing schemes. We demonstrate the utility of our protocols for quantum repeater networks.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

High-Level Considerations for Access and Access Controls by Design

Nuclear power plants must be, by design and construction, robust structures and difficult to penetrate. Limiting access with difficult-to-penetrate physical barriers is going to be key for staffing reduction. Ideally, for security, the reactors would be sited underground, beneath a massive solid block, too thick to be penetrated by tools or explosives with all communications and power transfer lines also underground and fortified. Having the minimal possible number of access points and methods to completely block access from these points if a threat is detected will greatly help us justify staffing reduction.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Prototype X-ray and Gamma Detection with Cyclotron Radiation Emission Spectroscopy

Cyclotron radiation emission spectroscopy, or CRES, is a novel approach to measuring the energy of an electron. By trapping a free electron in a high magnetic field, it undergoes cyclotron motion and emits radiofrequency (RF) waves. The frequency of this RF radiation is directly related to the energy of the electron. Because many cycles of the RF emission are recorded, the energy resolution of the CRES system is on the order of a single electron volt. To make a CRES system sensitive to photons, a target gas is used to induce a photoelectric effect, producing the electron that is subsequently trapped. By adding the binding energy of the target atom, the energy of the incident photon may be reconstructed. Using a xenon target gas, photoelectric interactions dominate up to approximately 300 keV, covering not only all atomic shell X-rays of the elements, but many low-lying nuclear states as well, including key transuranic elements related to nuclear security. CRES holds the potential of maintaining single-eV resolution up to this 300-keV range, thereby surpassing current state-of-the-art detectors by a factor of 10-100. The instrumental resolution of the system is limited by the uniformity of the applied magnetic field.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Active High Assurance Authentication Protocol (AHAAP)

The AHAAP Maturation Project involves maturation and evaluation of a patented zero-trust tamper-resistant high-assurance session-less dynamic and active device authentication protocol that simultaneously authenticates identity and provides integrity verification in a single step, substantially reducing the risk of cyberattack, and eliminating the need for costly and complex conventional communication security systems requirements (i.e., cryptography, Public Key Infrastructure (PKI), and key management). These cybersecurity attributes of the technology must be preserved when applying the technology to different cybersecurity solutions, including Command & Control (C&C), Over-the-Air (OTA) update, Common Access Card (CAC), and distributed energy resource (DER) implementations, among others. The technology research objective is to test and verify that the cybersecurity attributes of the technology are not degraded in different cybersecurity applications. The primary technology development objective is to build minimum viable products to demonstrate the technology addresses today’s cybersecurity threats so that prospective investors, strategic partners, regulatory agencies, and commercial customers can interact with and assess the protection assured by the technology. The AHAAP Maturation Project goal is to develop, test, and validate one or more AHAAP implementations. The AHAAP Maturation Project tasks are: (i) engineer AHAAP implementation software, (ii) build a functional prototype that implements the AHAAP software for demonstration, testing, analysis, and evaluation purposes, and (iii) generate a report detailing the results of the AHAAP C&C software and hardware implementation. The final project deliverables are: (i) AHAAP software implementation and prototype, (ii) a report from Sandia National Laboratories detailing the results of the AHAAP implementations.

97 MATHEMATICS AND COMPUTING↗

Monitoring the Structural Health of the Stage-Four Gibbs Resistor In Order to Maintain a Functioning Pulse-Forming Network

The Dual-Axis Radiographic Hydrodynamic Test (DARHT) facility at Los Alamos National Laboratory (LANL) is a critical facility used for nuclear weapons research and development (Los Alamos National Laboratory). Its primary function is to provide high-resolution, real-time images of the behavior of materials under extreme conditions, specifically during the hydrodynamic testing of nuclear weapons surrogates. The facility uses advanced radiographic techniques, such as dual-axis X-ray imaging, to capture detailed snapshots of these materials as they react to high-pressure environments. DARHT plays a key role in maintaining the safety, security, and reliability of the U.S. nuclear arsenal, supporting the Stockpile Stewardship Program. The facility helps ensure that nuclear weapons perform as designed without the need for nuclear tests. Its dual-axis radiography provides more precise data than traditional single-axis imaging, offering a comprehensive view of the internal dynamics of a weapon's primary stage.

42 ENGINEERING↗

The Use of the CCSDS Unified Space Data Link Protocol on All Space Links

NASA is actively pursuing the development of data link layer protocols for the human space program with the added intent of infusing the key capabilities of efficient space link security, support for inter-networking, and compatible operational modes with Optical Communications. There seems to be two divergent technical approaches on how to provide these capabilities: one associated with the use of a fixed length Protocol Data Unit (PDU) i.e., a fixed length transfer frame, and the other advocating the use of a variable length transfer frame. The objective of this paper is to evaluate the pros and cons of these two approaches within the context of existing Consultative Committee for Space Data Systems (CCSDS) Space Data Link Protocols and Channel Coding Recommendations for all space links: space to ground (return) link, ground to space (forward) link and space to space (proximity) links.

Kazz, Greg J↗

Nuclear and Chemical Sciences Division: Investment Strategy 2023

The mission of the Nuclear and Chemical Sciences (NACS) Division within the Physical and Life Sciences (PLS) Directorate is to advance scientific understanding, capabilities, and technologies in nuclear and particle physics, radiochemistry, forensic science, and isotope systems to support LLNL’s national security mission. NACS Division personnel conduct a diverse range of research activities in particle physics, nuclear physics, radiation detection, nuclear measurements, chemical and nuclear forensic science, nuclear and radiochemistry, isotope geochemistry, and environmental science. These areas are leveraged to address evolving national security challenges. Scientific research provides the foundation for addressing these challenges, and it is also the principal means of attracting, training, and retaining staff scientists who can deliver solutions across the Laboratory’s mission space. The overarching strategy is to position the NACS Division at the nexus between fundamental nuclear and chemical science research and nuclear security applications. This approach will support efforts to recruit, train, and retain top-flight scientists and engineers who will play a key role in executing the Laboratory’s core nuclear security missions, while also enhancing LLNL’s reputation as a center for innovative scientific research. This document describes the strategic vision that will be used to guide key investments aimed at enabling NACS scientists to lead new efforts and meet future challenges.

07 ISOTOPE AND RADIATION SOURCES↗

Secure Firmware Update and Device Authentication for Smart Inverters using Blockchain and Physically Uncloable Function (PUF)-Embedded Security Module

Cybersecurity of inverters has been significantly important as inverters become smarter in cyber-physical environments. However, firmware security of smart inverters against firmware attacks from various attack vectors has been less studied. Furthermore, this paper proposes a secure firmware update and device authentication method using a blockchain-based public key infrastructure (PKI) management system and a physically unclonable function (PUF)-embedded security module in a smart inverter. The proposed method is validated by experiments.

blockchain↗

Anatomy of a Security Operations Center

Many agencies and corporations are either contemplating or in the process of building a cyber Security Operations Center (SOC). Those Agencies that have established SOCs are most likely working on major revisions or enhancements to existing capabilities. As principle developers of the NASA SOC; this Presenters' goals are to provide the GFIRST community with examples of some of the key building blocks of an Agency scale cyber Security Operations Center. This presentation viII include the inputs and outputs, the facilities or shell, as well as the internal components and the processes necessary to maintain the SOC's subsistence - in other words, the anatomy of a SOC. Details to be presented include the SOC architecture and its key components: Tier 1 Call Center, data entry, and incident triage; Tier 2 monitoring, incident handling and tracking; Tier 3 computer forensics, malware analysis, and reverse engineering; Incident Management System; Threat Management System; SOC Portal; Log Aggregation and Security Incident Management (SIM) systems; flow monitoring; IDS; etc. Specific processes and methodologies discussed include Incident States and associated Work Elements; the Incident Management Workflow Process; Cyber Threat Risk Assessment methodology; and Incident Taxonomy. The Evolution of the Cyber Security Operations Center viII be discussed; starting from reactive, to proactive, and finally to proactive. Finally, the resources necessary to establish an Agency scale SOC as well as the lessons learned in the process of standing up a SOC viII be presented.

Wang, John↗

An August boost for key roles in Weapons Production

In August, the Associate Laboratory Directorate of Weapons Production (ALDWP) hosted two virtual hiring events and welcomed the first cohort of a new college pipeline program. With hiring steadily on the increase in support of the national security mission, creative methods like these have been key to finding successful candidates.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗

Analyzers Provide Water Security in Space and on Earth

Resourcefulness is a key quality for living in space, and on the International Space Station (ISS), that means making the most of water supplies. In 2008, the installation of the Water Processing Assembly (WPA) onboard the ISS allowed the space station s crew to do just that. The WPA purifies moisture from nearly every possible source - sweat, water vapor, wastewater, and even urine - for drinking and oxygen generation. Capable of producing 35 gallons of potable, recycled water a day, the system has reduced the need for water delivered to the ISS by over 1,000 gallons a year, saving significant payload costs in the process. As with any drinking water, quality is a concern, particularly when that water has been recycled. This is an issue of particular interest in space, where ISS crewmembers would have to deal with any illness far from the nearest medical personnel and facilities. The WPA employs sensors that monitor water quality by measuring its conductivity, and rounding out the system s quality assurance methods is a device developed for NASA by a private industry partner. That company has now made the technology available for ensuring the purity of water for consumption and industrial uses on Earth.

Source record↗

Genomics-Based Security Protocols: From Plaintext to Cipherprotein

The evolving nature of the internet will require continual advances in authentication and confidentiality protocols. Nature provides some clues as to how this can be accomplished in a distributed manner through molecular biology. Cryptography and molecular biology share certain aspects and operations that allow for a set of unified principles to be applied to problems in either venue. A concept for developing security protocols that can be instantiated at the genomics level is presented. A DNA (Deoxyribonucleic acid) inspired hash code system is presented that utilizes concepts from molecular biology. It is a keyed-Hash Message Authentication Code (HMAC) capable of being used in secure mobile Ad hoc networks. It is targeted for applications without an available public key infrastructure. Mechanics of creating the HMAC are presented as well as a prototype HMAC protocol architecture. Security concepts related to the implementation differences between electronic domain security and genomics domain security are discussed.

Shaw, Harry↗

Ion Channel Laser Based on Direct Laser Acceleration of a Shaped Beam Driver (Final Technical Report)

The main focus of our research was to understand the synergies between an electron bunch and a laser pulse when the two co-propagate through the plasma. We have clearly demonstrated using theoretical and computational modeling that the propagation distance of both the bunch and the laser pulse could be extended. The ability of the combined bunch/pulse system to extend the propagation distance and the size of the plasma bubble enables highly-efficient sources of relativistic electrons. As pointed out by the Plasma Decadal Study, such electron sources can be used for generating extremely bright x-rays for a variety of applications can serve as probes and diagnostics for other plasma experiments: high energy density (HED) sciences, inertial confinement fusion (ICF), and potentially Fusion Materials and Technology (FM&T). Development of advanced diagnostics of plasma-based accelerators is yet another key area identified by recent reports. Even broader security and medical applications of compact accelerator-based radiation sources, such as very high energy electron (VHEE) sources for FLASH radiobiology, have been identified by a recent multi-agency panel. A number of key technical issues were considered and successfully resolved during the course of the grant. Those include: beam loading effect of both the driver and witness bunches on the wake, laser channeling by the bunch, and the direct laser acceleration (DLA) of the driver bunch by the laser pulse. To demonstrate clear synergy, we were able to ascertain that the total energy gain of a witness bunch in the wake of the combined bunch/laser complex is large than the sum of the energy gains in the wake of the laser pulse alone, and the driver bunch alone. We have also demonstrated that not only the energy gain is improved, but the energy spread is not sacrificed. To carry out these simulations, we have to develop a range of in-house computational tools, including a fully-3D code WAND-PIC.

43 PARTICLE ACCELERATORS↗

Overview and Commentary on Applying the Coordinated Vulnerability Disclosure Process to Photovoltaic System Devices

The rapid expansion of photovoltaic (PV) systems, particularly inverters, has introduced new cybersecurity challenges that threaten both local operations as well as the broader electrical grid’s stability. PV inverters, integrated into critical energy infrastructure are potential targets for cyber attacks due to vulnerabilities in firmware, remote access systems, and communication protocols. The Coordinated Vulnerability Disclosure (CVD) process, as defined by the Cybersecurity and Infrastructure Security Agency (CISA), provides a framework for identifying, reporting, and addressing these vulnerabilities in a transparent and collaborative manner. This report outlines the CVD process as it applies to PV systems, detailing the roles of key stakeholders, such as manufacturers, grid operators, and security researchers. The report also highlights specific challenges in managing vulnerabilities for new and legacy PV systems, which includes those introduced by insecure communications and third-party supply chain components. By adhering to the CVD process, the PV industry can mitigate cybersecurity risks, ensure regulatory compliance, and maintain consumer trust, while safeguarding the operational resilience of the energy grid. Ultimately, the effective coordination of vulnerability management is crucial for securing the future of PV systems within the critical electric grid infrastructure landscape.

14 SOLAR ENERGY↗

CRADA Number NFE-20-08292 with Quantum Lock Technologies LLC (CRADA Final Report)

At Quantum Lock Technologies, our mission is to use future-proof hardware and software to bridge the gap between physical access control and cyber security. Physical security includes access to doors, lockboxes/containers, and machinery/robots. Connecting physical access control to the cloud allows for remote detection, fast ledger updates, and mobile or remote access. However, this also opens physical security up to the world of cyber-attacks. At Quantum Lock, we use quantum random number generation to generate completely random and unpredictable digital keys to be used by connected equipment in a facility. This quantum technology is then paired with end-to-end encryption and a one-time-key communication protocol to ensure the highest level of security. Through the Innovation Crossroads program at Oak Ridge National Laboratory, we have developed benchtop prototypes of our technology, connected with utility boards as our first target customers, and prepared for our first pilot with customers (target end of summer 2022).

97 MATHEMATICS AND COMPUTING↗

Quantum Lock Technologies: Innovation Crossroads Final Report

At Quantum Lock Technologies, our mission is to use future-proof hardware and software to bridge the gap between physical access control and cyber security. Physical security includes access to doors, lockboxes/containers, and machinery/robots. Connecting physical access control to the cloud allows for remote detection, fast ledger updates, and mobile or remote access. However, this also opens physical security up to the world of cyber-attacks. At Quantum Lock, we use quantum random number generation to generate completely random and unpredictable digital keys to be used by connected equipment in a facility. This quantum technology is then paired with end-to-end encryption and a one-time-key communication protocol to ensure the highest level of security. Through the Innovation Crossroads program at Oak Ridge National Laboratory, we have developed benchtop prototypes of our technology, connected with utility boards as our first target customers, and prepared for our first pilot with customers (target end of summer 2022). Below is a photograph of myself at an energy substation where we plan to eventually apply our technology.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Quantum Lock Technologies: Innovation Crossroads Final CRADA Report

At Quantum Lock Technologies, our mission is to use future-proof hardware and software to bridge the gap between physical access control and cyber security. Physical security includes access to doors, lockboxes/containers, and machinery/robots. Connecting physical access control to the cloud allows for remote detection, fast ledger updates, and mobile or remote access. However, this also opens physical security up to the world of cyber-attacks. At Quantum Lock, we use quantum random number generation to generate completely random and unpredictable digital keys to be used by connected equipment in a facility. This quantum technology is then paired with end-to-end encryption and a one-time-key communication protocol to ensure the highest level of security. Through the Innovation Crossroads program at Oak Ridge National Laboratory, we have developed benchtop prototypes of our technology, connected with utility boards as our first target customers, and prepared for our first pilot with customers (target end of summer 2022). Below is a photograph of myself at an energy substation where we plan to eventually apply our technology.

42 ENGINEERING↗

Supplier Research & Analysis Approach

"The implementation of NASA GSFC's portfolio of mission projects relies upon inter-connected, multi-tiered supply chains of organizations operating under direct and indirect contracts and other agreements throughout the U.S. and around the world. These supply chains are subject to an inter-related array of technical/production, business, market and security risks that are amplified by the ongoing globalization of industry and technology and which can disrupt or threaten the production and delivery of products and services when needed and in conformance with requirements. In recognition of such risks and associated challenges, GSFC's SMA directorate launched an innovative Supplier Research and Analysis (SRA) capability three years ago to gain greater insight into the operating environment, performance, capabilities and viability of current and prospective suppliers for GSFC projects and proposals. The capability uses business intelligence techniques and primarily open source information resources as part of a cost-effective, non-intrusive methodology to produce several types of research and analysis reports. The reports are based on a holistic analytical framework encompassing key technical/production, business enterprise management, market and security factors, and feature in-depth information, summary information profiles, SWOT (Strengths, Weaknesses, Opportunities, Threats) analysis, and candidate risk concerns in order to pro-actively support SMA and project management needs. The SRA capability, which is designed to complement and support ongoing SMA/project management activities and practices, has produced over 95 reports since its start-up in early 2015. This presentation addresses the approach, methodology and performance of the Supplier Research and Analysis (SRA) capability and its value in assuring the success of NASA mission projects. In doing so, the presentation provides lessons-learned, best practices, case examples and address how it fits into the development of an enterprise-level Supply Chain Risk Management capability."

supplier research and analysis↗